The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - drm/i915: Fix request ref counting during error capture & debugfs dump When GuC support was added to error     capture, the reference counting around the request object was broken. Fix it up. The context based search     manages the spinlocking around the search internally. So it needs to grab the reference count internally     as well. The execlist only request based search relies on external locking, so it needs an external     reference count but within the spinlock not outside it. The only other caller of the context based search     is the code for dumping engine state to debugfs. That code wasn't previously getting an explicit reference     at all as it does everything while holding the execlist specific spinlock. So, that needs updaing as well     as that spinlock doesn't help when using GuC submission. Rather than trying to conditionally get/put     depending on submission model, just change it to always do the get/put. v2: Explicitly document adding an     extra blank line in some dense code (Andy Shevchenko). Fix multiple potential null pointer derefs in case     of no request found (some spotted by Tvrtko, but there was more!). Also fix a leaked request in case of     !started and another in __guc_reset_context now that intel_context_find_active_request is actually     reference counting the returned request. v3: Add a _get suffix to intel_context_find_active_request now     that it grabs a reference (Daniele). v4: Split the intel_guc_find_hung_context change to a separate patch     and rename intel_context_find_active_request_get to intel_context_get_active_request (Tvrtko). v5:
    s/locking/reference counting/ in commit message (Tvrtko) (cherry picked from commit     3700e353781e27f1bc7222f51f2cc36cbeb9b4ec) (CVE-2023-52981)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2023-52981

high Nessus Plugin ID 248938

Version 1.3

Version 1.1

Version 1.3 Sep 6, 2025, 7:55 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202509061955
Version 1.1 Aug 13, 2025, 7:42 PM New Plugin Feed: 202508131942